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METHOD FOR CONNECTING A FIRST USER-TERMINAL TO A SECOND 
USER-TERMINAL, RELATED DEVICES AND RELATED SOFTWARE 

MODULES 

5 The present invention relates to a connecting method as described in 

the preamble of claim 1 and the related devices as described in the preamble of 
claims 6, 8, 10, 11, 12 and 13. 

Such a method for connecting a first user-terminal to a second user- 
terminal is already known in the art, e.g. from the internet draft document "A 

1 0 FRAMEWORK FOR IP BASED VIRTUAL PRIVATE NETV/ORKS"" from the authors 
Bryan Gleeson et ol, published in February 1999 by the Internet Engineering 
Task Force (IETF). Therein, a virtual private network is constituted by configuring 
all network access server access links, called stub-links in the referred draft, with 
the identity of the particular virtual private network whereto the access link of the 

1 5 network access server belongs. 

In this way each user-terminal is assigned to a particular virtual private 
network in a static way. Each of the user-terminals assigned to a common virtual 
privote network are able to estoblish a communicotion with any other user- 
terminal assigned to the same virtual private network because information on the 

20 address of each connected user-terminal, called reochability information is 
available within the virtuol private network. 

At the moment there is a first user-terminal being ossigned to a first 
virtual private network willing to establish a communication with a second user- 
terminal being assigned to a second virtual private network there is no way of 

25 connecting both user-terminals in order to establish a communication becouse 
there is no information available on the address of the second assigned to the 
second virtual private network. 

An object of the present invention is to provide a method of the above 
known type, a system, a network access sen/er, a subscriber data server and a 

30 second user-terminal adopted to perform this method, byt wherein access from a 
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first user-terminal connected to a first virtual private network is able to connect to 
a second user-termtnol connected to a second virtual private netvs^ork. 

According to the invention, this object is achieved by the nnethod 
described In claim 1, the network access server described in claim 6 end 8^ the 
5 subscriber data server described in claim 10 and 1 2 and the second user- 
terminal as described in claini 1 1 and 13, 

Indeed, due to the fact that a subscriber data server is added to the 
network and that the necessary connection information is made available 
enabling to determine the location of the second, to be connected user-terminal, 

10 This network element, the subscriber data server is able to store ond retrieve 
information on which the network access server the second user-terminal is 
connected to and the virtual private network the meant user-terminal forms part 
of. At a connection request from a user-terminal forming part of a different 
virtual private network, the subscriber data server retrieves the connection 

1 5 information about the second user-terminal in order to locate this user-terminal. 
Subsequently the subscriber data server forwards a connection request to the 
located second user-terminaL The second user-terminal in its turn decides on 
accepting the incoming call. If the incoming call is accepted, the user-terminal 
forwards o request to the network access server the user-terminal is connected to, 

20 to switch its connection from the current virtual private network to the first virtual 
private network. At the moment the switch is performed, both user-terminals form 
part of the same virtual private network. Then they ore oble to establish a 
communication because address information of the second user-terminal is 
available and accessible for the first user-terminal in this context. 

25 Another characteristic feature of the present Invention is described in 

claims 2 and 7 ond in claim 3. 

The connection request of the first user- terminal may be sent from the 
subscriber data server to the second user-terminal via the network access server 
where this network access server in a active way forwards the connection request 

30 received from the subscriber data server to the second user-terminal. On the 


other hand the connection request may be passed, as described in cloim 3, over 
a transparent connection between the subscriber data sender and the second 
user-terminal via the network access server. These are olternative solution for the 
transfer of the connection request between the subscriber data sender and the 
second user-terminal. 

Further characteristic features of the present invention are mentioned 
in claims 4, 8 and 9 and in claim 5, 

The connection request of the first user-terminal may be sent from the 
first user-terminal to subscriber data senior via the network access server where 
this network access server in a active way forwards the connection request 
received from first user-terminal to the subscriber data server. On the other hand 
the connection request may be passed, as described in claim 5, over a 
transparent connection between the first user-terminal and the subscriber data 
server via the network access server connected to the first user-terminaL These 
are alternative solution for the transfer of the connection request between the first 
user-terminal and the subscriber data server. 

The above and other objects and features of the invention will become 
more apparent and the invention itself will be best understood by referring to the 
following description of an embodiment taken in conjunction with the 
accompanying drawings wherein: 

FIG. 1 represents an internet network INW wherein the 
implementation of the present invention is realised; 

FIG* 2 represents the network occess sever h4AS1 of FIG, 1; 

FIG. 3 represents the subscriber data server SDS of FIG. 1 ; 

FIG. 4 represents the second user-terminal IJT2 of FIG. 1 ; and 

FIG. 5 represents the network access server NAS2 of FIG. 1 . 

In the following paragraphs, referring to the drawings, on 
implementation^ of the method and the related devices according to the present 
invention will be described. In the first paragraph of this description the main 
elements of this network as presented in FIG. 1 are described. In the second 
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parograph, all connections beiween the before nnentioned network elements and 
described means are defined. In the succeeding paragraph the actual execution 
of the method for connecting a first user-terminal to a second user-terminal is 
described. 

5 An essential element of this embodiment of the present invention is a 

network constituted by the internet network INW. Further there is a number of 
user-terminals, but in order to keep simplicity in this description only two user- 
terminals UTl, UT2 are presented. Both user-terminals UTl and UT2 are chosen 
to be a personal computer with a belonging screen and keyboard. Additionally 

10 there is a number of access nodes connecting each of the user-terminals to the 
internet network iNW and taking care of subscription of the connected user- 
terminals to a virtual private network. Concerning these access nodes, also 
because of reasons of simplicity only three access nodes NASI, NAS2 and NAS3 
ore described and presented in FIG. 1. These access nodes NASI, NAS2 and 

1 5 NAS3 ore chosen to be network access servers. 

User-terminal UT2 is connected to network access server NASI via an 
Internet protocol link, further referred to os an IP-link. User-terminal UTl is 
connected to network access server NAS2 via an IP-link. The network access 
servers NASI , NAS2 and NAS3 eoch constitute the edge of the internet network 

20 INW and are all interconnected via the internet network. The subscriber data 

server SDS is connected to each of the network access servers NASI , NAS2 and 
NAS3 over an IP-link. 

The network access node NASI as presented in FIG. 2. is built up of 
the switch notificotJon reception means SNRM, that is able to receive a request 

25 from the second user-terminal UT2 to iniHate a switch-over of the connection of 
the second user-temiinal UT2 from a second virtual private network to a first 
virtual private network, the switching means SM that is adapted to perform the 
switch of the connection of the second user-terminal from a second virtual private 
network to a first virtual private network and a user-terminal connect notification 

30 sending means HCNSM that is adapted to send registration information to the 
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subscriber data server at connecting or chonging of the subscribed virtual private 
netv/ork of the second user-terminal to the respective network access server 
NASI, 

The switch notification reception meons SNRM has an input- terminal 
5 that is at the same time also an input-terminal 1^ of network access server NASI . 
The switch notification reception means SNRM further is coupled to the switching 
means SM which in its turn is coupled to the user-terminal connect notification 
sending means HCNSM, that has an output-terminal which at the same time is 
an output-terminal Oq of the network access server NASI . 

10 This network access server -NASI optionally has the following means. 

At first there is a connection establishment request reception means CERRMl that 
is adapted to receive a connection request from the subscriber data server to 
establish a connection between the first user-terminal UTl connected to a first 
virtual prlvote network and the second user-terminal UT2 connected to a second 

1 5 virtual private network. Further there is a connection establishment request 

sending means CERSMl that is able to notify the second user-terminal UT2 about 
an incoming call from the first user-terminal UTl . 

The connection establishment request reception means CERRMl has 
an input-terminal that ot the same time is an input-terminal Ij^ the network 

20 access server NASI . The connection establishment request reception means 

CERRMl in its turn is coupled to the connection establishment request sending 
means CERSM2 that subsequently has an output-terminal that is at the some time 
an output-terminal of the network access server NASI , 

Besides these means the network access node NASI as presented in 

25 FIG. 2. may also comprise a connection establishment request reception means 
CERRM2, that is adapted to receive o connection request from the second user- 
terminal to establish a connection between the second user-terminal connected 
to the second virtual private network and the first user-terminal connected to a 
first virtual private network and a belonging connection establishment request 
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sending means CERSM3, that is adapted to notify the subscriber data server 
about an incoming call from the second user-terminal. 

The connection estoblishment request reception means CERRM2 has 
on input-terminal that at the same time is an input-terminal I4 of the network 
5 access server NASI . The connection establishment request reception means 
CERRM2 in its turn is coupled to the connection establishment request sending 
means CERSM3 that subsequently has on output-terminal that is at the same time 
on output4erminat O4 of the network access server NASI . These latest mentioned 
means optionally are to be included in o network access server and excluding all 
10 other, previously mentioned means. 

Network access server NAS2 and Network access server NAS3 have 
the same structure as the Network access server NASI as previously described. 
The Subscriber Data Server SDS as presented in FIG. 3 is built-up of 
the user-terminal connect notification reception meons UTCNRM that is able to 
1 5 receive the connection information sent at connecting of the second user-terminal 
UT2 to network access server NASI or at switching a connection from one virtual 
private network to another. The user-tjerminal connect notification updating 
meons UTCNUM is adapted to update the database DB of the subscriber data 
server with the connection information. Further there is a connection 
20 establishment request reception means CERRM that is able to receive o 

connection request from the first user-terminal UTI to establish a connection 
between the first user-terminal connected to a first virtual private network and the 
second user-terminal connected to a second virtual private network. The 
registration information searching means RISM is adapted to search in the 
25 database DB of the subscriber data server SDS for recent registration information 
of the second user-terminal UT2, and the connection establishment request 
sending means CERSMl, that is odapted to notify the second user-terminal about 
an incoming call from a first user-terminal. 

The user-terminal connect notification reception means UTCNRM has 
30 an input-terminal that is at the same time on input-ierminol lo cf the subscriber 


dota server SDS, This user-terminol connect notification updating means 
UTCNRM is coupled to the user-terminol connect notification updating meons 
UTCNUM which also has an output-terminal that is at the some time is on 
input/output-terminol I/O i of the subscriber data server SDS. 
5 The connection establishment request reception means CERRM has on 

input-terminal that is at the same time an input-terminal I, of the subscriber data 
seiver SDS and is coupled to the registration information searching means RISM. 
This registration information searching means RISM, hos an input-terminal that at 
the some time is on input/output-terminat l/O^ of the subscriber data server SDS 
1 0 and further is coupled to the connection establishment request sending means 
CERSM1 . The connection establishment request sending means CERSMl has an 
output-terminal that is at the some time an output-terminal of the subscriber 
data server SDS. 

The second user-terminal yT2 as presented in FIG, 4 is built-up of the 
1 5 connection establishment request reception means C6RRM3, which is able to 
receive a connection request from the subscriber data server SDS to establish a 
connection between the first and the second user-terminal, and an incoming call 
handling means ICHM thot is adapted to handle the connection request from the 
first user-terminal. At fast there is a switch requesting means SRM that is adopted 
20 to request the respective network access server to switch the connection of the 
second user-terminal UT2 from the second virtual private network to the first 
virtual private network* 

The connection establishment request reception means CERRM3 has on input- 
terminal that is at the same time an ii[iput-terminal I3 of this second user-terminal 
25 UT2, Further, the connection establishment request reception means CERRM3 is 
coupled to the incoming call handling means ICHM, thot in its turn is coupled to 
the switch requesting means SRM. The switch requesting means SRM has an 
output-terminal that is coupled to an output-terminal O3 of the second user- 
terminal UT2. 
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The network access server NAS2 os presented in FIG. 5 may 
alternaiively being built up of a connection establishment request reception 
means CERRM4 that is adapted to receive a connection request from the first 
user-terminal UTl to establish o connection between the first user-terminal UTl 
5 that is connected to the first virtual private network ond the second user-terminal 
UT2 that is connected to the second virtual private network and further a 
connection establishment request sending means CERSM4 that is odapted to 
no% the subscriber data sen/er SDS. about an incoming coll from the first user- 
terminal un . 

TO The connection establishment request reception means CERRM4 has 

an input-terminal that at the same time is an input-terminal I5 of the network 
access server NAS2. The connection establishment request reception means 
CERRM4 in its turn is coupled to the connection establishment request sending 
means CERSM4 that subsequenHy has an output-terminol that is at the same time 

15 on output-terminal O5 of the network access server NAS2. 

In order to explain the actual operation of the present invention it is 
assumed that o second user-terminal UT2 is connected to network access sender 
NASI and is connected to a second virtual private network. It is further assumed 
that another user-terminal, a first user-terminal UTl connected to network access 

20 server NAS2 and forms port of a first virfual private network tries to contact the 
second user-terminal UT2. 

According procedures that ore well known in the art by the persons 
skilled in the art and therefor not described, the first user-terminal UTl tries to 
obtain the Internet address, further referred to as the IP-address, of the to be 

25 contacted second user-terminal UT2. 

Because both user-terminals are not connected to the same virtual 
private network it is not possible to connect both user-terminals. The first user- 
terminal will request the subscriber data server SDS for a connection to this 
second user-terminal by sending the connection request over a transparent 
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connection beiween the first user-terminal and the subscriber data server vio the 
network access server NAS2. 

Alternatively the connection request can be sent to a connection 
establishment request reception meor« of network access sever NAS2 that 
5 receives this connection request from, the first user-terminal to establish a 
connection between the first user-terminol connected to a first virtual private 
network and the second user-terminal connected to the second virtual private 
network. Subsequently the connection establishment request sending means of 
network access sever NAS2 notifies the subscriber data server obout an incoming 

1 0 call from the first user-terminaK 

This may also be performed by the connection establishment request 
reception means CERRM4 of NAS2 that receives this connection request from the 
first user-terminal UTl to establish a connection between the first user-terminal 
connected to a first virtual private network and the second user-terminal 

1 5 connected to the second virtual private network. Subsequently the connection 

establishment request sending means CERSM4 notifies the subscriber data sen/er 
about an incoming coll from the first user-terminal. 

The connection establishment request reception means CERRM of the 
subscriber data server SDS receives this connection request from the finst user- 

20 terminaL Subsequently the registration information searching means RISM starts 
searching in the belonging database DB of the subscriber data server SDS for 
connection information of this second user- terminal UT2, 

The user-terminal connect notification sending means HCNSM 
sends connection information to the user-terminal connect notification reception 

25 means UTCNRM of the subscriber data server SDS at connecting of the second 
user-terminal to the respective network access server NASI or at switch-over to 
another virtual private network. The user-terminal connect notification reception 
means UTCNRM of the subscriber data sender SDS receives this registration and 
forwards it to the user-terminal connect notification updating means UTCNUM 

30 that updates the database DB of the subscriber data server SDS with the recently 
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received connection information. This registrotion information contoins 
information to which network access server a user-terminol is connected and 
which virtual privote network that user-terminal forms part of. There is also a list 
maintained for each user on which virtual private network the user has o 
5 subscription on. 

The connectton information searching means RISM then retrieves the 
connection information of the second user-terminal UT2, This connection 
information contoins the information that the user of second user-terminal UT2 
amongst others has also a subscription to the first virtual privote network and that 

10 this second user-terminal UT2 is connected to network access server NASI and 
that it currently is connected to the second virtual private network. Using this 
information, the connection establishment request sending means CERSMl will 
notify the second user-terminaj UT2 about an incoming coll from the first user- 
terminal UTl via a transparent connection between the subscriber data server 

15 SDS ond the second user-terminal UT2 via network access server t^lASl . 

The notification of the second user-terminal UT2 about an incoming 
call from the first user-terminal UTl may alternatively be done by sending the 
incoming call notification to the connection establishment request reception 
means CERRMl that receives a connection request from the subscriber data 

20 server to establish the connection between the first user-terminal connected to the 
first virtual private network and the second user-terminal connected to the second 
virtual private network vio the network access server. Subsequently the connection 
establishment request sending means CERSM2 notifies the second user-terminal 
about an incoming call from the first user-terminal. 

25 The connection establishment request reception means CERRM3 of the 

second user-terminal receives the connection request sent by subscriber data 
sender SDS and subsequently forwards this notification to the incoming call 
handling means ICHM that handles this connection request from the first user- 
terminal by, assume o pop-up screen requesting the user of the second user- 

30 terminal UT2 to accept an incoming call from this first user-terminal and 
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postpone or finish the ongoing communication. If the user decides to accept the 
incoming call from the first user-terminal the current communicotion is finished 
and the switch requesting means SRM, of the second user-terminal requests the 
network access sender NASI to switch the connection of the second user-terminal 
5 from the second virtual private network to the first virtual privote network. The 
switch notification reception means SNRM, receives the request from the second 
user-terminal to initiate a switch-over of the connection of the second user- 
terminal from the second virtual private network to the first virtual private network 
and forwards it to the switching means SM that finally performs the switch. At that 
1 0 time both the second and the first user-terminal form part of the same private 
network. 

This means that the communication between the first user-terminal 
and the second user-terminal further can be established according to the 
previously mentioned procedures that are well known by persons skilled in the 
15 art- 

The user-terminal connect notification sending means HCNSM further 
sends the updated registration information to the subscriber dota server at 
connecting of said second user-terminal to the first virtual private network. 

It is further to be remarked that any other communications network 
20 could have been described in this embodiment. 

Another further remark is that the network as described in the previous 
embodiment may act as a sub-network of large network consisting of a number 
of these networks. In this way the network consists of a number of distributed 
subscriber data servers co-operating in order to perform the method as described 
25 for any of the sub-networks. 

Although the above embodiment of the invention has been described 
by meons of functional blocks, their detailed realisation based on this functional 
description should be obvious for a person skilled in the art and is therefore not 
described. 
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While the principles of the invention have been described above in 
connection with specific apparatus, it is to be cleariy understood that this 
description is made only by way of example and not ps a limitation on the scope 
of the invention, as defined in the appended claims. 
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CLAIMS 

1, Method for connecting a first user-terminal (UTl) to a second 
user-terminal (UT2) over a network such as the internet ond said network 
5 containing a plurality of user-terminals (UTl, UT2) and a plurality of 

network access servers (NASI, NAS2, NAS3) each of said plurality of user- 
terminals (UTl, UT2) being coupled to a respective network access server of 
said plurality of network access servers (NASI, NAS2/ NAS3}, 
CHARACTERISED IN THAT said method comprises the steps of: 

10 a» at connection of said second user-terminal (UT2) to its 

respective network access server (NASI) sending connection information by 
said respective network occess server (NASI) to a subscriber data server 
(SDS) included !n said network and coupled to each network access server 
(NASI, NAS2, NAS3); 

15 b. updating q database of said subscriber data server (SDS) with 

said connection information; 

c- handling by said subscriber data server (SDS) of an incoming 
call request from said first user-terminal (UTl) in order to establish a 
connection between said first user-terminal (UTl) and said second user- 

20 terminal (UT2) said first user-terminal (UTl) being connected to o first 

virtual private network, soid second user-terminal (UT2) being connected to 
a second virtual privote network; 

d. searching in said database of said subscriber data server 
(SDS) for connection information of said second user-terminal (UT2); 

25 e. said subscriber data server (SDS) determining said respective 

network access server (NASI) connected to said second user-terminal (UT2), 
using said connection information;.' 

f. notifying said second user-terminal (UT2) about said 
requesting of said communication by said first user-terminal (UTl); 
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g. said second user-terminal (UT2) initiating and controlling a 
switch-over of said connection of said second user-ternninal (UT2) from said 
second virtual private network to soid first virtuol private network; 

h. said respective network access server (NASI) of said second 
5 user-terminal (UT2) switching said connection of said second user-terminol 

(UT2) from said second virtual private network to said first virtual private 
network; and 

i. At switch-over of said connection of said second user-terminal 
(UT2) from said second virtual private network to said first virtual private 

10 network sending connection information by said respective network access 
server (NASI) to said subscriber data server (SDS). 


2. Method according to claim 1, CHARACTERISED IN THAT 

15 said step of notifying said second user-terminal (UT2) about said 

requesting of said communication by said first user-terminal (UTl) is 
performed according to the following steps of: 

a. receiving said incoming call request of said subscriber data 
server (SDS) at said respective network access server (NASI) connected to 
20 said second user-terminal (UT2); and 

b- said respective network access server (NASI) connected to said 
second user-terminal (UT2) sending said incoming call request of said first 
user-terminal (UTl) to said second user-terminol {UT2). 

25 3. Method according to claim 1 , CHARACTERISED IN THAT 

said step of notifying said second user-terminal (UT2) about said requesting 
of said communication by said first user-terminol (UTl) is performed over a 
transparent connection between soid subscriber data server (SDS) and said 
second user-terminal (UT2) via said respective network access server (NASI) 
30 connected to said second user-terminal (UT2). 
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4. Method according to claim 1, CHARACTERISED IN THAT 

said method further comprises before step c, the steps of: 

a. receiving soid incoming call request of said first user-terminal 
(UT2) at soid respective network access server (NAS2) connected to said first 

5 user-terminal (UTl); and 

b. sold respective network access server {NAS2) connected to said 
first user-terminal (UTl) sending said incoming call request of said first 
user-terminal (UTl) to said subscriber data server (SDS). 

10 5. Method occording to claim 1 , CHARACTERISED IN THAT 

said method further comprises before step c, the step of sending said 
incoming call request of said first user-terminal (UTl) over a transparent 
connection betv/een said first user-terminal (UTl) and said subscriber data 
server (SDS) via said network access server (NAS2) connected to said first 
15 user-terminoL 

6. Network Access Server (NASI ) for enabling a connection between 
a first user-terminal (UTl) and a second user-terminal (UT2) over a network 
such OS the internet, said network containing a plurality of user-terminals 
20 (UTl, UT2) and a plurality of network access servers (NASI, NAS2, NAS3) 
each of said plurality of user-terminals (UTl, UT2) being coupled to a 
respective network access server of said plurality of network access servers 
(NASI, NAS2, NAS3), 

CHARACTERISED IN THAT said network access server (NASI ) comprises 
25 the following means to enable said connection using the method according 
to cloim 1 : 

a. switch notification reception means (SNRM), adapted to receive a 
request from said second userrtermlnol (UT2) to initiate o switch-over of a 
connection of said second user-terminal (UT2) from a second virtual private 
30 network to a first virtual private network; 
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b. switching meons (SM), coupled with an input to an output of said 
switch notification reception means (SNRM) and adapted to perform said switch- 
over of said connection of said second user-terminal (UT2) from said second 
virtuol private network to said first virtual private network; and 
5 c. user-terminol connect notification sending means (HCNSM), 

coupled with an input to an output of said switching means (SM) and adapted to 
send connection information to said subscriber data server (SDS) at connecting of 
said second user-terminal (UT2) to said respective network access server (NASI) 
and at switch-over of said connection of said second user-terminal (UT2) from 
10 said second virtual private network to said first virtual private network. 

7* Network access server (NASI ) according to claim 6, 
CHARACTERISED IN THAT said network access server (NASI) further 
comprises; 

15 a. connection establishment request reception means (CERRMl), 

adopted to receive a connection request from said subscriber data server (SDS) to 
establish said connection between said first user-terminal (UTl) connected to 
said first virtual private network and said second user-terminal (UT2) connected 
to said second virtual private network via said respective network access server 

20 (NASI); and 

b- connection establishment request sending means (CERSM2), 
coupled with an input to an output of said connection establishment requesting 
reception means (CERRM1) and adapted to notify said second user-terminal 
(UT2) about an incoming call from said first user-terminal (UTl). 

25 

8. Network Access Sen/er (NAS2), for enabling a connection 
between a first user-terminal (UTl) and a second user-terminal (UT2) over a 
network such as the internet, said network containing a plurality of user- 
terminals (UTl, UT2) and a plurality of network access servers (NAS1,NAS2, 
30 NAS3) each of said plurality of user-terminals (UTl, UT2) being coupled to a 
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respective network access server of said plurality of netv/ork occess servers 
(NAS1,NAS2, NAS3), CHARACTERISED IN THAT said network access server 
(NAS2) comprises the following meons to enable said connection using the 
method according to claim 2: 

a, connection establishment request reception means (CERRM4), 
adapted to receive o connection request from said first user-terminal (UTl) to 
establish said connection between said first user-terminal (LfTl) connected to soid 
first virtual privote network and said second user-terminal {UT2) connected to 
said second virtual private network; and 

b. connection establishment request sending means {CERSM4), 
coupled with on input to an output of soid connection establishment requesting 
reception means (CERRM4) and adopted to notify said subscriber data server 
(SDS) about an incoming call from said first user-terminal (UTl). 

9. Network access server according to claim 6, CHARACTERISED IN 
THAT said Network access server further comprises: 

a, connection establishment request reception means (CERRM2)^ 
adapted to receive o connection request from said first user-termmal (UTl ) to 
establish said connection between said first user-terminal (UTl) connected to said 
first virtual privote network and said second user-terminal (UT2) connected to 
said second virtual private network;- ond 

b. connection establishment request sending means (CERSM3), 
coupled with an input to an output of said connection establishment requesting 
reception means (CERRM2) and adopted to notify said subscriber data server 
(SDS) about an incoming call from said first user-terminal (UTl), 

1 0, Subscriber Data Server (SDS), for enabling a connection of a 
first user-terminal (UTl) to a second user-terminal (UT2) over o network such 
as the internet, said network containing o plurality of user-terminals (UTl, 
UT2) and a plurality of network access servers (NASI , NAS2, NAS3) each of 
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said plurality of user-terminals (UTl, UT2) being coupled to a respective 
network occess server of said plurality of netv/ork access servers (NASI, 
NAS2, NAS3) and said subscriber data server (SDS) being coupled to each 
network occess server of soid plurality of network access servers (NASI , 
5 NASC2, NAS3), said subscriber data server comprises the following means to 
enable said connection using the method according to claim 1: 

a. user-terminal connect notification reception means (UTCNRM), 
adapted to receive said connection information at connection of said second 
user-terminal (UT2) to said respective network access server (NASI) and at 

1 0 switch-over of said connection of said second user-terminal (UT2) from said 
second virtual private network to said first virtual private network; 

b. user-terminal connect notification updating means (UTCNUM) 
coupled with an input to an output of said user-terminal connect notification 
reception means (UTCNRM) and adapted to update a dotabase of said 

15 subscriber data server (SDS) with said connection information; 

c. connection establishment request reception means (CERRM), 
adapted to receive a connection request from said first user-terminal (UTl) to 
establish a connection between said first user-terminal (UTl) connected to a first 
virtual private network and said second user-terminal (UT2) connected to said 

20 second virtuol private network; 

d. connection information searching means (RISM), coupled with an 
input to an output of said connection establishment request reception means 
(CERRM) and adapted to search in said database of said subscriber data server 
(SDS) for connection information of said second user-terminal (UT2); and 

25 e. connection establishment request sending means (CERSMl ), 

coupled with an input to an output of said Connection information searching 
means (RISM) and adapted to notify said second user-terminal (UT2) about an 
incoming call from said first user-terminal (UTl). 
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1 1 . Second user-terminal (UT2)^ for inclusion in a network such 
as the internet containing a plurah'ty of such user-terminals and a plurality of 
network access servers (NASI, NAS2, NAS3) each of said plurality of user- 
terminals {Un, UT2) being coupled to a respective network access server of 
5 said plurality of network access servers (NASI, NAS2, NAS3), 

CHARACTERISED IN THAT said second user-terminal (UT2) comprises the 
following means for enabling a connection between a first user-terminal 
(UTl) and itself over said network using a method according to claiml : 
a- connection establishment request reception means {CERRM3), 
10 adopted to receive o connection request from said first user-terminal (UTl) via its 
respective network access server (NAS2) to establish a connection to said second 
user-terminal (UT2); 

b, incoming call handling means (ICHM), coupled with an input to on 
output of said connection establishment request reception means (CERRM3) and 

15 adapted to handle said connection request from said first user-terminal (UTl); 
and 

c. switch requesting means (SRM)^ coupled with an input to on output 
of said incoming call handling means (ICHM) and adapted to request said 
respective network access server (NASI) to switch said connection of said second 

20 user-terminal (UT2} from a second virtual private network to a first virtual private 
network. 


1 2. Soflwore module for running on a processing system for 
inclusion in o Subscriber Data Server (SDS) and for enabling a connection of a 

25 first user-terminal (UTl) to a second user-terminal (UT2) over a network such 
as the internet, said network containing a plurality of user-terminals (UTl, 
UT2) and a plurality of network access servers (NASI, NAS2, NAS3) each of 
said plurality of user-terminals (UTl, UT2) being coupled to a respective 
network access server of said plurality of network access servers (NASI , 

30 NAS2, NAS3) and said subscriber data server (SDS) being coupled to each 
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network access server of said plurality of network access servers (NASI , 
NAS2, NAS3), said software module comprises the following software sub- 
modules to enable said connection using the method according to cloim 1: 

a. user-terminal connect notification reception sub-module, adapted 
5 to receive said connection information at connection of said second user-terminal 

(UT2) to said respective network access server (NASI) and at switch-over of said 
connection of said second user-termirial (UT2) from said second virtual private 
network to said first virtual private network; 

b. user-terminal connect notification updating sub-module, co- 
10 operating with said user-terminal connect notification reception sub-module 

and adapted to update a database of said subscriber data server (SDS) with said 
connection informotion; 

c- connection establishment request reception sub-module, adapted 
to receive a connection request from said first user-terminal (UTl) to establish a 
15 connection between sold first user-terminal (UTl) connected to a first virtual 

private network and said second user-terminal {UT2) connected to said second 
virtual private network; 

d. connection information searching sub- module, co-operating said 
connection establishment request reception sub-module and adapted to search 

20 in said database of said subscriber data server (SDS) for connection information 
of said second user-terminal (UT2); and 

e. connection establishment request sending sub-module, co- 
operating with said connection information searching sub-module and adapted 
to notify said second user-terminal (UT2) about an incoming call from said first 

25 user-terminal (UTl). 
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13. Software module for running on a processing system for 

inclusion in a second user terminol (UT2) and for inclusion in a network such as 
the internet containing a plurality of such user-terminals and a plurality of 
network occess servers (NASI, NAS2, NAS3) each of said piurolity of user- 
5 terminals (UTl, UT2) being coupled to a respective network access server of 
said piurolity of network access servers (NASl^ NAS2, NAS3), 
CHARACTERISED IN THAT said softwore module comprises the following 
software sub-modules for enabling a connection between a first user- 
terminal (UTI) and itself over said network using a method according to 
10 cloiml: 

a. connection establishment request reception sub-module, adapted 
to receive a connection request from said first user-terminal (UTI) via its 
respective network access sen/er (NAS2) to establish a connection to said second 
user-terminal (UT2}; 

15 b. incoming call handling sub-module, co-operating with said 

connection establishment request reception sub-module and adopted to handle 
said connection request from said first user-terminal (UTI); and 

c. switch requesting sub-module^ co-operating with soid incoming 
call handling sub-module and odapted to request said respective network access 

20 server (NASI ) to switch said connection of said second user-terminal (UT2) from 
a second virtual private network to q first virtual privote network. 


25 
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ABSTRACT 

METHOD FOR CONNECTING A FIRST USER-TERMINAL TO A SECOND USER^ 
TERMINAL RELATED DEVICES AND RELATED SOFTWARE MODULES 

5 

The present invention relates to o method for connecting a first user- 
terminal to a second user-terminal over a network such as the internet. This 
network contains a plurality of user-terminals and a plurality of network access 
servers where each of this plurality of user-terminals is coupled to a respective 

10 network access server of this plurality of network access servers. 

If the second user-terminal connects to its respective network access 
ser/er^ this network occess server sends connection information to the subscriber 
data server. At reception of the connection information the database of the 
subscriber data server is updated with this connection information, 

1 5 The subscriber data server bundles an incoming coll request from q 

first user-tern-iinal in order to establish a connection between the first user- 
terminal that is connected to a first virtual private network and the second user- 
terminal that is connected to a second virtual private network. The subscriber 
data server at first searches in- its database for connection information of the 

20 second user-terminal and then determines the respective network access server 
that IS connected to the second user-terminal based on the determined 
connection information. Then the second user-terminal Is notified abouf the 
request for communication by the first user-terminal. The second user-terminal 
initiates ond controls a switch-over of the connection of the second user-terminal 

25 from the second virtual private network to the first virtual private network. The 
respective network access server of the second user-terminal switches the 
connection of the second user-terminal from the second virtual private network tc 
the first virtual private network. Then, at the switch-over of the connection of the 
second user-terminal from the second virtuol private network to the first virtual 
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private network there is also connection information sent by the adjacent 
respective network access server to the subscriber data server. 
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